CVE-2022-1397

API Privilege Escalation in GitHub repository alextselegidis/easyappointments prior to 1.5.0. Full system takeover.

Score

CVSS 3.1 8.8 High

Status

Modified - security@huntr.dev

Published

2022-05-10

Last modified

2024-08-03

Weaknesses

CWE-269

Affected products

• Alextselegidiseasyappointments (Alextselegidis)
• Easyappointments (Easyappointments)

References

• https://github.com/alextselegidis/easyappointments/commit/63dbb51decfcc1631c398ecd6d30e3a337845526
• https://huntr.dev/bounties/5f69e094-ab8c-47a3-b01d-8c12a3b14c61